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[#PJitf>i¥;?ffl&l&0J!] 
[000 1 ] 

[0 0 0 2] 

2 ffiS#2 0 0 1-31 0 8062 
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Pkmrnm^ttte. m^tt:'&^xm-<D®mm zm^z> 0 znmmrn 
^xpk&m®mzm^xm^itisxmji<Dm^$iz@ki®-tz> 0 

[0 0 0 3] 

Z> 0 m-^MMO) 1 -DX2bZ>mj]M%T$cmt)\ Paul Kocher, Joshua Jaffe, and B 
enjamin Jun, "Differential Power Analysis" in proceedings of Advances in 
Crypto logy -CRYPTO' 9 9 , Spr inger-Ver lag, 1999, pp. 388-397 

<DM-%izmmx%z> a 

[0 0 0 4] 

mtlMm&miZte. mmn^mm 0^T> SPA^V^) (Single Power Ana 
lysis) £ J; (J^T, D PAiLV* - )) (Differential Power Anal 

ysis) #^£ft3o s p Aizm^7u^vv-iz&tf&m~<Dm±immT-z(nft 
m-fr ibmmmom^ e> . d p a itmm& & &m<z>mtimmT- * <nmft*M 
ffi-t2>z\£.iz£^xmmm(Dnifeikfii<\ -mwizizu p A(Disf>m±x^^> a 

[0 0 0 5] 

MAJORS Amn&ffimm^iZft-f P A#, m%.\Z. Thomas S. Messerge 
s, Ezzy A. Dabbish and Robert H. Sloan "Power Analysis Attacks of Modula 
r Exponent itiat ion in Smartcards" Cryptographic Hardware and Embedded Sy 
stems (CHES' 9 9), Spr inger-Ver lag, pp. 1 4 4 - 1 5 7 &CfB^£ tlT V>£ 
. ^mmm^^:<Dm^(Dmm<DD E. S (Data Encryption Standards) lC*ff 
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5 S PA&il^DPA^, Paul Kocher, Joshua Jaffe, and Benjamin Jun," Di 
fferential Power Analysis," in proceedings of Advances in Cryptology— CR 
YPTO' 9 9 , Springer-Verlag, 1999, pp. 388-397 ICgBIKS tlTV^ 

So &m.mm*tt<D&ntttmm£&v oz^j y^-iv (Rijndaei) m^w-? 

5DPA^, #Ix.l£> S. Chari, C. Jutla, J. R. Rao, P. Rohatgi, "An Caut 
ionary Note Regarding Evaluation of AES Candidates on Smart-Cards," Sec 
ond Advanced Encryption Standard Candidate Conference, March 1 9 9 9 iCfB 

[0 0 0 6] 

*§i*&d p Am^mmm^m^nx^^o dp Am^Mmzm± 

•t2>fc#)(D&ffi : bfflft2tlX^2> a 
[0 0 0 7] 

dp Azmm^Mte&mmm^<Dmn<Dmmtt&mmzmw-tz> 0 02, 333 

«fctf4tt, J^Wfc#£»fc^T?MV^*l5#£Ja (operations) T? & 5 gt X. O R 

(iMfiamswo > mm^m&£mmmmmz*n?tii*Lx^z> a 

[0 0 0 8] 

euic^r, ixoRSAijf-^xi<z)ifffK i t^Mmmmmm (x 

OR) OffiAZi$:^ t § o «gu IfXORIOTS«l:^t'tt, Oi: + 

xnztt-t2>mmmm2nr~&jjz l = l (xi) &m<d 

x£<fct>*y IC-QVMTL (xXORy) =L (x) XORL (y) X$bZ> a Wtf&U 
miZit, ¥vh&m (permutation) £ tfff *J*JMP#** . 04JCi3V>T, 
*i^IiWtt, AAf-^X i $:^WIIltffi*Z i =W (Xi) £#y& 
frStf>x Jctfy Ko^TW (xXORy) *W (x) XORW ( 

y) t*&&„ ikffl&$tm±. mmmzit^mM^m^-^jvs t> o x£w*l# 

fflv\ A*X$:X= {x u _ x , . . . , x 1( x 0 } (uteg«) £uf@lc 
##JU SboxtfeSw. (i=0~u) ^I^Tz i =w i (x £ ) 
U Z= (z u _ 1 . . . 2 lZo ) ilUT^lTffi^Z^tS. 
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[0 0 0 9] 

mmmte&mmm^T'it* rne>©ixoRig, mmmm^^mmm^m 

[0 0 10] 

n-^wzm^xwfeisT. njimmmmzm&o 07 <a) it^<D^.o^ntj 
mmmmzMmvr^z. mm^^A^^azMLx^<Dm^n^xmmiz 

("fey h) &G^f§ 0 
[0011] 

ORSI (02) timm&m (B4) ©M^ire*SI«#ft©«&j3*LTV** 
. i©Bgp^btC*f"tSDPAS:SiWr*. H6tt, 0 5 IZ&tf 2>&M<D#mj&U 

&mm™ iizm&^&m&mmzMvmLtc.ib&X'&Zo meiz&^x. tts© 

i (K= {k u _ 1 , . . . , k x , k Q } ©tf»<0ir3(3!)S*) i:U WS 
b o XT-7MZ&Vt2>mmMm*v? i £ U \&i2*z t (=w. (m.XOR 
k.) ) DPA(Dfe«5IC, :7niZvtf|$»T?MV*e>*lTV*£fc0>M3gfi 

' il^^z.' =w. (m i XORk i ' ) &IIEI/T, jRSStlfek.' iC^f 
tSl^G (k.* ) &*©«|J^*^G 0 (k.' ) feJ:t>*G 1 (k.* ) \Zft 

[0 0 12] 
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mi] 

GoCk'i) = {G| zr, = w i (m i ek , l )©»e«f©lfy hftt=0 } (1) 
[«2] 

G,^ = {G| z , i = w i (m i 0k' l )CD^eflfOlfy hffi=l } (2) 
[0 0 13] 

DGCk'i) = (G.lllt^l^iffllll©^ 

- (G 0 i:ST5«^ifftH©f^) (3) 

[0 0 14] 

iU7 (a) &G 1 izm^zm±iffim®m<n*i%mj]mmmmzMmLT^& a 
mi (b) i,zg 0 izm?zmjjwmmm(D¥mm±imm®mzm7K\,x\ / ^ o m. 

it. mi (a) t (b) omzm^mi (o icM^$tife^s*m^ffi^^ 

fiP*,k i ' *k i X$>^>m^iZit. mi (A) £ (B) ©^£^127 (D) }C 

> mmmz.mKZMmtt-fcmfe (determine) ?Z>Zt.tfT*gZ> 0 
[0 0 1 5] 

?£fC, k i 1 = k L T'&Zm&lZ, tAMilDG (k i ' ) }CX/\°-f?# 

mnzztzmm-tz, k .• =k .t?**»^ m&g u ) en 

fe<fctK^I (2) JCfl6oT«P£iteG 0 (k i ' ) ££tfG : (k i * ) lc#tf* 



6 



&5E#2 001-3108062 



#2 001-178407 



«£Lfcz = W;L (m.XORk ) HZ.ftiZttJ&'t&zfU'ky'y-ft 
JCfeW**BR©z £ =w . (m i XORk i ) t^tCDm £ lC*f bT- SJfTS 
<Z)T% z . <£>/^ • tfx.>f h HW (Hamming weight) fCRI LT#C0>3S (4) 

ffi = 1 Mx.tf2*t4 ^>yhi (110 1) 2 ©A^ >^^i>r h 

HWtt3T?*S. 
[«4] 

(G, Zj ©fi^HW) - (G 0 \zmtZ> z t WHW) = 1 (4) 

[0 0 16] 

— k i ' *k fijestifcz.' = W;L (m i XORk i ' ) 

t-entc*f*5'r«^'n"fey-9-WJcfew*i5ieicD*ti-?*i©z A =w i ( m . xo 

Rk. ) ht)mMGkte<DT', 4K5£3*lfcz. i * tC*f"tS^ (l) fc<fct>*5£ (2) 
i:^oT^0m,|Cft5i^G (k.* ) £8P3Hft-£G Q (k.' ) ^ <fc tJ? 
G 1 (k.' ) IC^tfTfc, 3SK*©-£*l-e*l©z . (JP^z.* ^^StlfeU 

55 (5) tfm,tt2> 0 

(G t z , W^HW) - (G 0 izm-f 2> z , (D^HW) - 0 (5) 

[0017] 

5£ (4) tff&&-f&mt<\ZG 0 (k ) i:G x (k i ' ) ©ratcn-Kfll 
z £ CD^/\* >^ • tf:c>f hiC^t^I^CS^ 5£ (5) tf/ftftf 
itG Q (k i ' ) i:G 1 (k* ) (D^T*©n- Kffiz . <D¥-i%S\S. VfpzcJ h 

[0 0 18] 

z i =w i ( Xi ) "e^tStlS^w . te, i^l^OROM^RAM^i:' 

<&*^u±^(b^im-r--7>s b o xcDffi^Mz . #n- K^ic iotM 
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T. S. Messerge, Ezzy A. Dabbish and Robert H.Sloan, 
"Investigations of Power Attacks on Smartcards" Proceedings of USENIX W 
orkshop on Smartcard Technology, Mar. 1 9 9 9 {CfB^£ tlT £ „ 
[0019] 

lot k.' =k.T*feS#-a-, « (4) ^«fe$tlS^^Tf?g»*^©ll 
^«^f^ft^_tl(DXA'>r * fcV^7g{CfcoT3S*l5;&^ 5$ (5) A' 

-Y^^tiT, «tfe¥ffi^ffl^i:^Sc DPAli, H4KB3<0j»7gas&L&# 
A L fe«f-*f fc*JC %jgJB T* £ S £ £ j^JRI W L/ T V * 2> . 
[0 0 2 0] 

ftf L^Jctf L 2 &lfy hCIBWafcfcU w^DESfflSbo 

tt> FIPS 4 6 , "Data encryption standard" Federal Information Processing 
Standards Publication 4 6, U.S. Department of Commerce/ National Burea 
u of Standards, National Technical Information Service, Springfield, Vir 
ginia, 1 9 7 7 &#U83;ftfcV^ 0 8<3D«ta=b, EI 6 £ m&<DMmiZ&mT*%, 
R«tCDPASrjaMbT«tKS:«l^1?#*. 
[0 0 2 1 ] 

&Lt<z>#8n?ji, immmwiQxDs b o xffiA{:ftiLtDPA$:jiMit^ 

S. $ fefC, A^Jm i hik i ©XORCDM (iXORlICDffiA) ^ S b o x 
feVNTli> Higiry h^f^lckoT^cDS (6) T?*S*i*«#?H»#n- K 

M. Akkar, R. Bevan, P. Dischamp, and D. Moyart, "Power Analysis, What Is 
Now Possible..." Asiacrypt 2 0 0 0 IC£V\T#^£*IT 
[»6] 

V(z) = a' + 3lqZ 0 + ajZi + ... + a 7 z 7 + a,, iZ 0 z, + a^ZxZa + ... + a6 i7 z 6 z r (6) 
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[0 0 2 2] 
[0 0 2 3] 

[0 0 2 4] 

[0 0 2 5] 

[0 0 2 6] 
fi^CDD P A*f^ 

tlT V^-S Thomas S. Messerges, "Securing the AES Finalists Against Power A 
nalysis Attacks," in proceedings of Fast Software Encryption Workshop 2 
0 0 0, Springer-Verlag, April 2 0 0 0 tffti £ *lT V^ £ „ 7XJr>^iii 
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a 

[0 0 2 7] 
[0 0 2 8] 

wm^Mv>p 3 tie®^©Bif#^a&isii o^pi-^fb^stc^jgt- zm&iz. t 

ft<D&EIl 0(Z)Bf#fbtCj3V^TEf 1 1, 1 2£J:t>*l 3 lCj^£ *IT J: 5 
[0 0 2 9] 

CtlNf&iftigrSftiX . =X .* XORR i WcfX / fecfct^SLUtR i ^stms 

i ^tWStl*. 02 til 1, 03^012. &i:tf04 tHl3 fC^£*lT 
V^fliS (operation) ICfcttSX., X.' , Z i ' , R.fc«ktfRO 

i LT, &©5£ (7) MfitS. 

Xi = Xi'0 Ri 

Zi = Zi'©ROi (7) 
[0 0 3 0] 

B2 7?ttA*fX i i:iK . [C^ITZ • =X. XORK • *««jrS*l-B©tC 
fcfLT, 01 lT?ttPff#ffc»«rt«|JT?a»»^«SK:J:oTSL«RK i 
fet, AMX/ i:fl|K j lC*f ITZ . ' =X.' XORK • XORRK • ^ 

^^ffi^ffctCfc^TR i Z.RK i fr£ RO i =R £ XOR 

rk . ifimnznz. 
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[0 0 3 1 ] 

03T*teZ .=L (X^ (Dffim&mtffit>nZ><DlZMLT. 012<Z>Hgf#fl; 
^T*«Z i ' =L (X i * ) OSEtJI^fffcn, VX^iiit'iiRO^L ( 

[0 0 3 2] 

EJ4'ettw 1 , w 2 , • • w u _ 1 tg^tl5uI©Sbox5:M^fc# 
HM^*^ft)tl-5©tC^fLT> HIl 3 (A) (Dm^t^mX'lt. @0NewS 
box^ffl^feMiCiotRAMi^lCwi' 1% wi' £ , ■ • •, wi 
' u _ 1 T?*Stl«5«fUV^S b o x^Snt,. £ft&ffiv*T#i»^&#*T 
*>*lS. 01 3 (A) li-£CDN e w S b o x fcMV^flt 

w' u _ 1 ^tftan, w' x , w ' 2 , • • • , w* y.^Ro'^KAs 

tl*. 013 (B) ttNewSboxffiiUM^gLt^S, NewSbox 
tt, m$(D%Lm$&3i$£1tm^TRO i &£/*U £fc, R i = ri u _ 1 - •'• 
r i j r i 0 t RO.=roi 1 * • • roi^oiQt, 012 (B 
) WtMv^tlS S b o x, w x , w 2 , • • w u _ x . w i ' j ( 

x) =w (xXORri .) XORroi . Zffif=.-$-w i ' . & j - 0 , 1 , • 

J J J 

• u - 1 KoV^TtfSfifcU ftt-efflROitwi' , &ffl*t6. 

J 

[0 0 3 3] 

(A) (B) ©Sbox©wi' tfgUfcfC^o T^b"T -5 <£>T\ DP AC 

fcVNTS b o x©fi§S:^5Ii:*^t«!V^ HPt>, lu^©Ml iC^WS S b 
o x#BJE&T&*fcV^ LfcV^^ @8©It^A0fS©^ 

-r^>^lc^VNTM^$tifc«^M^ffi«SS:^: (l) (2) t:|oTG 0 

ttD P AKM U^t'&S. HtttC, fui£<Z>£#2 feitf3 {CfcttS^XOR 
W»©ffl:*K:a3W5M£>tf*j&B feitf S b o x'sCDA^lCfc WSIg^C 
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[0 0 3 4] 

T^5<, N^^^-^&IItf)^^ XORjgf, tWbjilllSubb 
yte (Substitute Byte) , i/7 h^lS h i f t, J: OP ^ * ^ h 3 ^ 
IM i x e d c o 1 fcU *^tf>l8te, S!J(2XO 

^■A,T'£U, ^ hz2^A#L3l$:^-A/-ev^V^ 014lC;J3V^ Ntt, M 
s e c©tf y b$tlC J: otftftSft, Ksec««128^ N N = 

10tU 19 2lf>yh«}iN=12i:t, ;J3«fc 2 5 6 If y h ©tg-£8:N 
= 14fct5. K . &*j£*8t (sub-key) £ P^litiSfttT B15S, 
>«5 S — /I/SSCD 128/192/256 tfy h|}^iK s e.c^?)N+ lfi© 1 2 
8fcfy htfc*i!K 0 , K x , • • K N Z&f&-*2>m±m£.l%%5Zttl>T^2> 
□ htt P ://www.nist.gov/aes/lC^$tlTVN 

SRijndael<Z)tbai»JCffi«3nT^*. 
[0 0 3 5] 

HI 6litW hffilS u b b y t e Si^ltfiU, Z.0)®m\Z> 8 tf >y h 
- 8 My MiS b o S &ffiV*T, 1 2 8 tf y h - 1 2 8 tf y 

SEiftSrfTo. 01 i\xv-7 bt&ms h i f t fc^uTfcy, zioMm, ;uh 

^^aa^&S. 01 8ti$ hn^A^SIMi x e d c o 
lumn^UfitJ, 3£>flt3gte, fT#I&«V*fc#GF ( 2 8 ) _h£>itH 
■*>. 

[0 0 3 6] 

Hi9tt, 01 4 ©iiS^Nlg^-r >f-^tctbT, gLiJtvx^^^ji 

fflbtN^7^f yr-^S^^bt V>^ 0 01 9©Na9>f>f-^tt, 0^ 

© cfc e> &_t{Wtf) N m©nf-5ft*0.3I8l$ i: TM<D N m<£> * ft£j*gp £ SL8t58£i: 

tl©Jl£7v^{CMi-^^>^A^VX^>fii§:^f . t^AM hjifLlS u b b y t e 
it. 016 &C^£*ITV^ J: ^teMMT* 1 6f(DS box:S i> Q , S i> 
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x , • • • , S . f (1 5 Zm^T 128tfyh-128tf>y h^lg^SISrff 
e> 0 S i> 0 , S i( x , • • S if ! 5 JifgilSCDfrl^S b o x "N 
ewSbox" ICtoT4^ftfeSboxt**. E 2 0 l±, NewSbox 
5:^bTfeU, AiJiRin^^^ ««PT?»^L/feaSJtR o u t . fC^oTtB 

1 6{0CD Sbox, S i> q (x), S i> 1 (x), • • • , S i> 
15 (x) 44J*U a»Rou t . S h i f t #L3S & J: M i x 

e d c o 1 umn^lti, M1%<D =y 4 >"r-M£<3D*&a t EPfiftJC, ©1 7£J:tf 

[0 0 3 7] 

Ell 9ffljfiI(Z)7D-&^f»;^ [1101] — [1109] &&T$7.7-V-J 
[1201] — [1209] tmt. 
[110 1] i = 0 HMv htS. 

[110 2] SLI5CVX^>fBR i n££j£U ^{C^bTR i ntfflXORi 
#&*T"5 (XORfS) . 

[110 3] ^{C^flTK . XORK . h©XORII^!^ YX^S 
CT^^ilRK . SAAl/T 1 6fi©S b o x, S, , (x) (j=0, 1, 

• • • , 15) ££^3 = 

[110 4] 7s7-*J? [110 3] T*£f£L£S • - (x) £M^£S u b 
b y t ej^aH^. 

[1105] Shift f&mjS&ZfM i x e d c o 1 umnM&l!^ 
[1106] i: = i + 1 il-T^o 

[110 7] i < N- 1 T?&St©-£ttX-r-y? r [1 10 3] \ZmZ>o -ZtlM 

[110 8] K N _ 1 H<DXORMm*m\ RK N _ 1 §7^? teWMmz 
Mbtl6fi(5Sbox, S N-1, j (x) (J' =0 ' * * 15 

) ZZi&tZ. 

[1109] S N _ lf j (x) ICiSSubbyte Shift MS 

[iiio] [1109] (DmnrntuzMLx, vx^M^^^tH^ 
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[0 0 3 8] 

V ^ ? j&£f&$lM<D7 n - : 

[120 1] i = 0, Ma sk=Rini:t'y hfS. R i n& [1 102 

[1 2 0 2] «P#^«iaaJ<fc US^ofcRK. Ma s kXORRK • 

[1 2 0 3] Xf-y^ [1 2 0 2] T-££&L£frt^Ma skfcNewSbo 
xlCA^J-T^dhfC «koT, HlffiSbox, S, • (x) (j=0, 1, 

J- J J 

• • • , 15) HZimRo u t i £#T, Ro u t . &$rbV*Ma s Rfcf 

s. . (x) itm^itt&mmam i m.a> s u b b y t eiz&^xm^bnzo 

[1 2 0 4] Mask^Shif t MS £ <fc tfM i x e d c o 1 umn^lC 

[1 2 0 5] i :=i + Ut»;htS. i <N-lWi^iXf»;^[ 
1 2 0 2] \zmz>o 

[1 2 0 6] Bt-£ft*&afflSfr!bA#3*lfcRK N _ ^^Ma s kXORRK 

[1 2 0 7] Rinjj.jINewSboxICMtSitlCioT, 1 6iffl 
Sbox, S N _ 1> j (x) (j=0, 1, • 15) ^SLffcRout 

N.^it, Routf^.^ffb^MaskttS. S N-1, j (x) l± 
Ht^bMSSPcDUN- lgffiSubbyte tCfcVATMVA h ft*. 

[1 2 0 8] MaskSShif t^IICMU *(&M38MIII&#tL VnM a 
s k £ 0 

[1 2 0 9] Hf-^-fb^BP J: »;A*3ftfeRK N ^e>, MaskXORRK^ 
[0 0 3 9] 
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[0 0 4 0] 

0m-li2o©cfir4ixgj;tFy^P, z = x X O R y ZWiW? £ <DIZM IT, 
$m~?X?m&T'\$x' =xXORr x , y' =yXOR r y WctWtx 
' , y' fr<oz' =x' XORy' &mW-~t 2>mz. z' icm? 5$t h ^"7X * 
IfflMr 2 = r x XOR r y fc^ll^S&Mtf&Sa^T'&So <*£IC, 

#l«3ESI»cfev^T, Jiffs b o xav^^^ai^tft^-^&ROMjc^-rs 

[0 0 4 1 ] 

imi&M&'r - £ R O M IZfikW*? Z> <D JC*f L X , SL^SC VX * ffi&T* ttflgp-JHC 
©fctftC$rLV^S b o x&RAMKltejHrTSfr&T&S. #9itli8 If y h~ 8 tf 
V hOmmZft? S b o x £MVN£^-f i/^-^^lCfeVNT, DPAffilbt 
&££vx?ffi}££|lii£-r3tcteft<£2 8 = 2 5 6;U h^CRAMlWlT 
l^U «^«ST16 (STY-f^nxi/^hn>|ii) fofinxh 

[0 0 4 2] 

*^ e>^©Hip^b*T?<Z)|SIlC'7X^ffiS:^'r«i trifle J: oT, M#W©*&JI 
itS© ftiifc J: R A M««©||ff bftX v%& JftSJjcatJcfit 

[0 0 4 3] 
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[0 0 4 4] 
[0 0 4 5] 

[0 0 4 6] 

j£^-:/;i/©tf*<7) HfifcaWKf &£*.tv>.&. *<D#MMW£m^m. 

[0 0 4 7] 
[0 0 4 8] 
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[0 0 4 9] 
[0 0 5 0] 

gL^tc^oT^^Pt^^Jig^^cDio&^-rsx^^^i:, -e©^ 

[0 0 5 1] 

««:*3ST»*, DPA$:MV\fcMi©M (analyze) &H*itCU m^^U 
[0 0 5 2] 

1 7 ffifE# 2001-3108062 
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JiT-fe^i^ «rig&c&£ 0 M^-liST l 6ffflfin^ htf)*^- FffiOL 
S If «^T'% 6 K/H h;gS©*£&ROMfIige£#;iT^£<Z)T% 

[0 0 5 3] 
[0 0 5 4] 

S2 i immmzz&mi <D$4 7<Dm^tmmi o o&nmwwmzmvx 

[0 0 5 5] 

in 2 i ic^r, m^tmm 1 o o hjrr (r = o, i, • • •, q-i 
) &»4tu»»4#io3ii, ■e©a»Jcfi6oTH)e^^^<tFM 0t R © 

^cI^VX^fflFM 0( R 4:©SMfc»»3fr&«*"*-<B (XORtS) (X i 
n* =^XORFM 0) R ) mmWWamm l 0 6 AijXin' Sr^UgL 
iR^otAAXin' mftbTffl^Xout' &£j£-rSH&#ft*ttJI$P 
1 0 1 i:,f©ailCfot@^ > 7^^iFM N+ lf R (Dtp<D l-D^mnvx 
Mt§Wi0 5i:, f©ffi*Xout' i:SjR$nfc@^^iFM N 

+ 1, R^©^»»a5plS:?R*LT (XORU) Bf#^ (Xouf XOR 
FM N+1, R ) 0 7 &-&>uT?^& D rrt% N 
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[0 0 5 6] 

m-^itmn 1 o o $«bic, ^=e'jm©rami 6 2 h^x^ 

6 4 ROM^©^D • ^^'J 1 6 0 M£jft3*lT V\5^n 

-DTz.n*><Dmmmmmi 0 3-1 0 7 & w«its^nt«yti 5 0 ££^-a,t* 

^5. ftfMi:Lt, ^nt«>ti 5 Ote, Mill 0 3-1 0 7&CMJ& 
giUi 0 3~i 0 7 £HJflLT% <fcVN 0 ^©^-a-, Ef2 1 ityu-mt LtIS 

[0 0 5 7], 
Bt#-fb^M 1 0 1 lCfeV\T, EI2 2tf)£tXO R % EI2(Z)^0»i3i:t) J gI2 

3 mm^moym^^ tc £ o tass n* 9 * > Fw»#**ig u**t s n 

FW»#*fr34x*. 

[0 0 5 8] 

02 2©gtXORte, ^&gPl 0 9 lC<fcoT&»RtCt£oTa#*2tbfcK5r7 
X^fFM^ R i:0iK . ££XORLT]££'f»££y&U ^(DUtAtlX i ' 
t&XORlt^Zi' £Sy&-f£o 12 2 3<D#M&mM&* «*»H1~ 
1 1 9{Cj:oT5LlRi:^otSbox©Iiwi j( R ' (j=0, 
u-1) fc»RU f©IK$tifcgiwi j( R * ■&fflv^T*»^3Eil'r*. . 

[0 0 5 9] 

Mt^X*ffi&fC£^T^L£5£ (7) <Dm&Zm^Z£. 02 2©ilXOR 
(CfeVATEI 1 1 CDR i t RO i K*;fJ&LT#C©5£ (8) ##£>*l£ 0 
[18] 

ROi = Ri © FMyt (8) 
[0 0 6 0] 

El 2 3 (D#N$0^^{C^TMv^*l£|21 1 3 (B) ©NewSbox©ri 
H r o i IZftJfcLTtkftiS: (9) tfW^ft&o 

19 ffilE#2 0 0 1 - 3 1 0 8 0 6 2 



#2001-178407 



[ft9] 

wij nixi*) = wi(ri © xi') © roi (9) 
[0 0 6 1 ] 

[0 0 6 2] 

02 4 tCfcVNT, *^8l2 0 0tt, a»R&»4t6a»»4*2 0 3i: 

B2 0 4 Aj3<D¥JC£VJ&B2 0 4 {C J; o TiiRS *lfc@5g TX FM Q 
R fc$:XORt5 (Xin* =5p^XORFM 0> R ) XOR (SMt&ftS&Sftl 
) 2 0 6 A*Xi n' lfH<Jf©Ai3Xin' ftbtffiijX o u t 

' $:»5Sl0B|Wi^2 0 8-2 0'9 J:,/A*X i n' fc^IRUSLIfc 
R{C^oTSvncM?'JiC^$tlfeBiP#^«!iS^2 08-209© t£(Z> H^i 
^LT^©^$tLfcBt-^^MPtCA*X i n' &#t^f ^«mgP2 1 1 
|WfC£LifcR{Ct£oTft#ffc&3S§|5 2 0 8-2 0 9tf>tp©|WIC 
MStlfeBf^MIiA^oaiAX out' &Mt5W213il > 

sLiKic^oT@^ > T^^MFM N+ x> R <D*<Di^zm%iLTmm?z>tymv 

2 0 5 t fffl^Xout' M$nfc@^^iFM N+lj R^ X 
ORLTBi#:£ ( = Xouf XORFM N+1 R ) 5:4^t5XOR2 0 7 
£-g-A,-eVN£ 0 r^T% N«^M$tl^0^V^^MO|§[5:^-r o 0 2 4 IC 
£V^, 2o£>^MS2 1 l£J;t>*2 1 3 <D o UT % £ < , 

(Z)tffi# ©TOS £ # V ^ T £ J: V % „ 
[0 0 6 3] 

m^itmW 2 0 0 $ W^>Jffl®RAM2 6 2 @£vX*iB 

, @MMf-^Sboxil, ra«L^£ISit§ROM2 6 
4 ROM^CD^n^^A • **EL> 2 6 0 tC*&&ft£ tlT V^S ^ -MC#£o 
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xz.ftb<Dmmmmm2 03-211 wt5ynt^2 5 0 1 $:-g•^-ev^ 

£„ ttWMf&H L/T, ^n-fe^y-9-2 5 0 f®lS!2 0 3-211 iC^-T 

zmt&znm^fct^v 2 6 o^^yny^A&ii^-r^r iKc^oT^ani 

^2 0 3~2 1 1 ZM^LT^J:^, Z<Dm&, M 2 4 if? U ~M £ LT 
[0 0 6 4] 

m^itWMm 2 0 8 ~ 2 0 9 ft, @5tV*?MFM- . fijjtfS b o x®t»; 

hwi . . &m&2> z iLMftizmmtfPkKmvT'Zb&o &mmtwm® 2 0 8 

~2 0 9 iCfcVNT, BI2 5©||XOR^W> ®2©«?^&S£<J:Z>*EI2 6© 
[0 0 6 5] 

0 2 5tf)#|XORte, ff-*Hfc#UI3P 2 0 8 — 2 0 9 {C MM<D ^ 

iFM i( R tiKi&XORlt^§ffiMb ( tO)W.HA±lX i * i: & X 
ORLTffiijZi' S:Mt5o 02 6©#M^#I&, *©i£-SHfc*M8SK:H 

tcsboxot^hwi ^ R ' ( j ; = o, • • • , u - 1 ) *m^T&m& 
mm-tZo ^rt, $m-?x9mmiz]svz>& a) (Dm&zm^zt. 025 

©iXO RfC^TEl 1 1 ©R i tRO i lC#f/£LTRO i = RiXORFM 
if R ##£*U M2 6<D#ffim$£mz&\,\Xm l 2 (B) OritroilC^ 
w i j ^ R ' (xi' ) =wi (riXORxi' ) XORroi 

[0 0 6 6] 

or «fc L^mmmmzmm-tZa 

[0 0 6 7] 

(a) dp AttntLTomzh&vmm 
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V 7s Z U (D & # L £ V n T* \* D P A \Z M b T If V n pT fg '(4 ffi $> & o 
[0 0 6 8] 

(B) RbM««^»^jc«iSRriBtt©IWH 
&*&fcitoiz&mteROM<Dm&i*B*Kte&^&&tf&&a 

[0 0 6 9] 

V* # ffl & mm ftl ©IIC q # 2 7? =fc lZ$c£V2b Z> Z. H ififtfr o X V n £ . 

~?z> 0 mmiz (b) (DffimizmmisX, ffij*fc*Hxr7**«©«q&2g«ic 

LT, ^59^ K#CDS b o x SMlCtSii:?, Sboxfflf 

[0 0 7 0] 

B2 7fcfc, M2 1 ©Hi <£>#-f ^"©Blp-^^gl 0 0©— M^lt^J, 9 
(Rijndael) B£#tf:i£lC 0feH»flSi6« 3 0 0 

&3*LTV^ 0 fib, H2 7JCfc^T, El 2 1 {Cfctt 5 -fe y V 1 5 0, ;* ^ 
U 1 6 0, 1 6 2 1 6 4 liffi#fb<BfcftiC#l&3*lTV\5 B g|2 7iC^VN 

T, lt^ftgS*3 0 0», SURh (h = 0, 1, q- 1) 

£fc#g£|g3 0 3 ?<D$mhlzm-oXmfe^X?mFMi n h #01o^l 
^ltMt5MS3 0 5 AAC^fcJS'iRSftfci^^ftFMi n 
h t$:XORt5XOR 3 0 2 i:, A^Xin' &'SUtoTSL»h fCflfo T A^7 
Xin' £[f-iHtLTffi;frXo u t ' **»S<0B»-^ft«£3S« 3 1 0 ( 

#« i \t0 ^ i 2) il, UN- 2©<3DH6P#ffc«ta®3 1 0tf)ffi;frX o u t 

' SAAXin' £hX%&V$mRlZ'&^XZ<DAjl*m^4bLXm^$:Xo 
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ut* S^fSfN-l|S©liTOIi3 1 U, 
[0 0 7 1] 

* tfFM i, h fe«»^*38^#3 2 9 g|K . h@^^iFM i ^ h & 
XORLTffi*5:Mt5XOR3 3 1, fffl»ii:A*Xi' ££XOR 
t5XOR3 3 3 il, -e©a8!th-JCfi!oTS b o xT?&S@^<iS if jf h ( 
j=0, 1, • • 15) (Dtp0 1 o^I^lt?^^ $tl^0iK Q> h ££t 

s«gi»3:fcM:38#?»3 3 9 a, *<osg#ta*ifc"s , , .ctotxo 

R 3 3 3 frb(Dmj]%:-y-7A4 hf5Subbyte 3 3 4 i:, Subbyte 
3 3 4 <Dmjj%:i/7 ht^Shif t 3 3 5 t, Shif t 3 3 5 (D&tjZS. 9 
Xha^At^Mi xe dCo 1 umn3 3 6 £ %SAjV Vn-5 0 
[0 0 7 2] 

SgN - 1 gt<Z>lff-9fc*!3l& 3 11H i ^ftlJMS 3 1 0 £ m^OW 

m%£3 2 9 £ <fctf 3 3 9 fc, XOR33l£J:tf333£:, Subbyte33 
Shif t 3 3 5 i: U MixedColumn li^itT, flJifeS 3 
7 9 (Cj;otS^$tlfe@^V^^«FM N( h £K N h&XOR3 7 liCfco 
TXORbtV^^$tifc»K N) h &£f£U K N> h S h i f t 3 3 5 <D 
ffi^jt$:XOR3 7 3 CJ:oTXORU fj^#§ 3 9 9 {C «fc o T»?£ 
VJ*^fltFMo ut h i:XOR 3 7 3 (Dftjjt. &XO R 3 83{C<fcoTXORL 

[0 0 7 3] 

nt% FM i( h> FMin h , SJ;tl!FMout h H ©^V^^^fitT'fe 
-So S, , h tt, l£©Sboxt*S. :i*ie>©B}£*7:**te33J:tf S b 

± , J j II 

Xi'ifejctFS b o x(D^^-^;i/$:, Milf0 2 1 ©RAM 1 6 2 £ <fct>*H 
2 4 ©RAM 2 6 2 © <fc 3 & R AMlCTftefc < T, 02 1CROM1 6 4 
0 2 4 ©ROM 2 6 4<D£z>teROMlZfeffl-tZ>Z illCiot, USSJC&JgfcR 
AMfligSr^iJglCtiS^T'^Sc £©«fc3fc#I^RAM*0>fflSi|&tt, S^12 
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bCARAMfl^LjWoTV^V^n* h#- F^&MWCti 

[0 0 7 4] 

ei 2 7 (Dm^imm s o o &cA;d¥£#£y&£*i6£:, mioinm^^z o 

{C^o T, EI2 7 (C^f^T©-©^#|3 0 5, 3 2 9, 3 3 9, 3 7 9 j3J:tf3 

2 8 &EI2 7 {CfcttS Subbyte334 ©«J*&M^LT V%S. Shift 

3 3 5 \$m 1 6 ICM^tlTV-S^©?:, Mixedcolumn33 6 &EI 
1 7 ICM^tlTV^ MV^ 0 EI 2 8©Sub byt e tC£V^T/5 <^ £>*l 
SSbox S, , h lZ. m 1 6 {C^£*lT^63Mr©^-f >f-;Ws 

J- > J » 11 

u'bbyteCDSbo xtfeS S £MV*T#C0>5$ (10) T'^t£*l£ 0 
110] 

s Uh (x) = s(xea ij , h )eb y , h do) 

[0 0 7 5] 

S (10) CfeWSa. , h J3<fctfb, . Jt ^ (9)ffiri. 

J. , . J , 11 J. , J 9 11 J-> 

^itfroi.. . tC-etl-?tl*f^L, -etl-ftl i K© S u b b 

J J. j J 

y t e <DA±>&£Tfiti±l<D*?X?mzttm^-Z>o a, , h H A^JV^^ffi 

■If J » 11 

^©S ubbyte j: y i®7^ £ tf*M^C £ o X — MUftlC®: 

[0 0 7 6] 

EI 2 7 ©Bf-iHb^g 3 0 0MO7D-^f»;^ C 1 301] — [1314 
] iC^fo 7*5- V 7 [1303] ~ [1309] «0 2 8 ©» i ®JCfe 
T*&£„ TsTVZf [1310] ~ [1314] &0 2 7 ©UN - 1 ©ICfe^S^t 

[1301] i=0tty h"T-5o 

[ 1 3 0 2] A*¥i&SW$y, &V*-e&»#£#3 0 3fC*oTSL«h ( 

o^h^q-i) A^ans. i©a«htt«©^7 i y'7"x?«ffi**i*. 
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[1 3 0 3] AJjsp-JCKM IT, mfe-?X>7i&<DM-& {FM i n Q , 
FMin^j) ©cf*^FMi n h ^i^3 0 5(Cj;oTMUm XO 
R 3 0 2 {C ioTAiJ^^Cil FM in h 5:XORt5 0 XOR302 (Dffi^fctf 1 

[1 3 0 4] mfe^X?m<Z>%k& (FM if 0 , FM if q _ 1 > © 

^e>FM. ( h ^«3 2 9}Cj;otMlT, ^HK^ ^H^-^X 
fcitFFM^ h {C^l / TXXORK i XORFM i) h SrM3fU *C0WLW& 
^ £ tr L V \tp m 7 s - # X £ -f Z> . 

[130 5] Subbyte334 iCfeV^ cpfS^- # X fC*f L T, 
3 3 9JCJ:oTfa.»hK:!SeoT38#(Snfe#i»^SC«^— if j, h (x 
) C^oTt^HhMtS. ^<7)MilMm&$TLV^r^-#X£:t-£o 

[1 3 0 6] Shifts 3 5ICfeV<ti|i|gf-f htS, 

h a *i fe 5 s - * & if u v n # h 7 s - * x £ -t & „ 

[1307] Mixedcolumn336 (C tp^T 1 - # X & ^ # * h 

n^Afljarrs. ^©&s;^ii£frbv^ra^-#xhir-£ 0 

[1 3 0 8] i :-i + Ut9ht5. 

[1 3 0 9] i < N- 1 (Dm^\% [1 3 0 3] ICJlSo * -X- 

[1310] aahjctfcoTiajiv:**^^ (fm n _ x> 0 , • • , 

FM N-1, q -i) ©W&FMjj.^ h ^M3 2 9(:j;otI^lt 
, ^iK N _ r cpraf-^Xj3J:t>'FM N _ ^ h (C*fbT, XXORK N 
_ x xorfm n _ 1 fh *0>iB»g*£frbv*(pra^-*xfct 

So 

[1311] to#§3 3 9 iz£?>xmiR2tifc#mMmi&'r-znis N _ x t 

j( h (x) Jcfl£oT1f^A-f N«t.S&fr^. ^©MM^fcirbv^r^-* 
Xi:f-5 0 

[13 12] S h i f t 3 3 5}:S^T*Flr-^X^i/7 hf5„ 7 

[13 13] SL»htCfieoT@3tV^^ffi©^ (FM N) Q , • • • , FM 
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-#X, fi£^K N feJ;tJ«FM N> h tC*fLT, XXORK N XORFM N)h 5: 

[13 14] $mhKfti^xmfe^*?m<DMiZ (FMo u t Q , • • • , F 
Mo u t q-1 ) ©#?>FMout h &-$J#l#§3 9 9 {Cj:otS^lt, tpK 
f-^Xi:FMout h ^XORU fCil^&aiM^Xout' 

TMt5. 

[0 0 7 7] 

H2 9 tt, 9>f >T J -;i/S5iC@^vx^^5:jifflbfcS'J(7)Bt^^afi4 0 0 

&Mj^bTV>£„ <BU Ef2 9 IC^T, 02 1 JCfcttS^n-feyiJ- 1 5 0, ;* 
t'JlBO, 1 6 2fcJ:tfl 6 4 'ttffi#fb©fc«>lC#ttS*lT V>*. @290i 
m*. ZCD&^Vy KKffclCfcttS#S ubbyte334 lC*g^3*lfcflJ&*S 
3 3 9tC«*&3;tx£S b o x ^S^KHC "efeS^tt, BT2 7 £ HH C T* & *J , 

|s^^«^ll^^co^^1:^iS^^^iL3&v^ 0 h30»bi2 gc^wss ubby 

t.e 3 3 4«»ltV^, YX^iFM^ h ftS© h = 0 , 1, 
• • q-UC0V%T#C(Z)5£ (11) ^Tifefo 

Hi] 

FM U = fc h ©FMin h (i = 0) 

j C h ©D h (i=l,...,N-l) 

I D h (i = N) (11) 

[0 0 7 8] 

ZLZ1T% C h fcJ:tf D h li, 1 6 h ©JtfSre* U , Wb€»c hj . fc£ 
t>*d h> j ( j = 0, 1 , • • • , 15) Z^tl^tim^T. #Ctf>5£ (12)© 

[»12] 

{^h = c h,15 ••• c h.l c h,0 
D h = d h ls ...d h l d h , 0 (12) 
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[0 0 7 9] 

02 9 (Dm^ik&M* 0 0 ICfcWT, -V-ZfA-<( bmmS u b b y t e 3 3 4 
, Wm%§3 3 9 lZ£^TM1RZftfr 1 6IOS b o x, S Q) h , h< 

* ' s i5, h* Mv ' T * 03 0{c ^ ftffii&Mmmmzfi e>„ i6ios 

12) Cfi»5c h( j , d h) d &JgV*T, S j( h (x) = S (xXORc 

h,J> XORd h, j 
[0 0 8 0] 

gf2 9 (Dmmt^n^ o ocD^jg^n-jc&^Ti*, H2 i <Dm^tmu4 o 

OCD&JS^n-lCfcW'S;* -5=^:7 [1 3 0 5] fiitf [1311] tCfcV^T, flj 
i§3 3 9CJ:2'ta»hi:ftoT16i<i!)S b o x, S 0,h' S l,h* ' ' ' 

[0 0 8 1 ] 

EI 2 7 (M&^itMUZ 0 0T'tiSubbyte33 4 CD^-^Jltf&^Vy F 
T*M&£tf)fC;>tfLT, 0 2 9©Bf#fk^g4 0 0T'tt^t®77> FT^ji©^ 

mmiZ&VZ S u b b y t e (gf 1 6 ) ^(DAilM* X £3r*„ r*UC*fU 0 
30tf)Subbyt e^l0A*ittXXORC h i:St^il^t't§o 
, v^^«(DWJC^; (11) ©K^^itt- S^bT-fe-S,, C h tt©»i fcttW 
#^VN^iS:^(Z)T% S(10) ICfcWSS. , h (x) =S (xXORa. 

J- 7 J * ll J- 

jf h ) XORb i( jt h JC^bT, a i? j h &a##UCW«fcV*£ 
fCaS!/tT'£3o J:ot, 0 3 0 {C^-TJ: e» S d ^ h (x) =S (xXORc h 

j) xoRd h) . vmztizmmi ic&w#&s b o xtm^tcv-jAj b 
mm&*mt.tez<, «ot, m2 wmwt&WL* o ox*m^btiz s b o xtc 

&gfc«MROMS&, 0 2 7©Hr&ftI£«3 0 0 1 /N "T£ £ il# 

[0 0 8 2] 
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&#5£ (1 2) }C, lk(D^ (1 3) KL5%-r*ffS:iDit*i4:JCJ:oT, 

5 b o x<0» («HSCD») &tail&£ 1 hfr&«/u<Z> 1 -fey MC 

[» 1 3 ] 

J C h,15 C h,U ••• C h>0 

L^h.is = dh,i4 = — = d h0 (13) 
[0 0 8 3] 

IP*>, 0 2 9 ©HgH^ffcgS«4 0 0 T*MV%e>tlS S b o xC^g^MROMf 
0 2 7 OBf^f bgfi 3 0 0 0i^© l/16ttS3i:^T't§ 0 &>±fr<b 
, & (13) $:itt@2 9©Bf-^fb^g4 0 0 * £ (C J: o T, Sbo 

x(C^S^ROMM^5ril2 7 ©Bt#fb^«3 0 0 £JB V^i§-£©1/ (16N 
) tn^fc^tS. 
[0 0 8 4] 

IS 2 9©Bir#^g4 0 0T*ttA^J{W^J:^m^ffi!flCfeVATFMi n h 
£<fc£>*FMo u t ^^tl^tlXORLTVNStf, - (BJMtegc^telC^ 

[0 0 8 5] 

0 3 1tt, H2 4ffll2©^>f^©l«fftit20 0C!)-«S:^0Tfey, 5 

o #U EI3 1 (C^T, BI24lCfe^S^ , niZ>y -9-250, ^^^ 2 6 0, 2 

6 2 ££^2 6 4 tefgiNb<Z>fc«>lC#H&3*lTV>5o 03 1tC^T, «F#-fblS 
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e>i«#§5 0 2££t>*5 0 4 L -TO#|5 0 2£<fctf 5 0 4 iZ J: o TSLIfc h ICfig 
oT^^n-SSVNlCM^JlCM^Stl^HO-^q- l©qfl<Z>t©-&*ra8|S5 1 
l~513il, &-^/uT*VN£„ 
[0 0 8 6] 

H&#«La8P5 11-51 3tf)&*l£, AijXi n* SS^oTfflAXo u t 
' ££j*'tS*««©l*-»ft»ai«5 3 0 (®ifcj:0£i£N-2) grflgCD 
ffi;fr&A;fr£LT^Ifcy*(Z>A;ft£lt^tbTffl#Xo u t ' ££/&-r £3!N - 
18<iDI«*ftftISi:5 3 1, £^"A,T*V^ 0 »0«~«N-2«©Bi|-9ffc«ta 
15 3 0tt, S^Xi'l, XOR 5 2 3, ^tlftlCS u b b y t e 5 2 5, 
S h i f t 5 2 6 £ «fctfM ixedcolumn527 -etl-^tlO®^ 
7X^ttfe«fct)!@tS b o xfC^oT H^ffc fl 0 JgcDBgHHt&Sm 5 3 

0<Z)iia&CteXOR 5 2 1 #*§-£3*lT V^„ IN - 1 ®.<Dm^it%mm. 5 3 1 fct 
, XOR 5 2 3, 528£J;l>*529, Subbyte 5 2 5fe 

£t>*S h i f t 5 2 6 ^tl-f <fc tfHJt S b o xlCt£ 

oTfflP^b&^f -5- H3im UK • £ FM j ^ h £ ffX O R £ tltc K i X O 

fC^K . £FM . t^XORiCiotXOR^tltXOR 523 — 553© 

1 J , II 

A^CgMfc^tlSJ^lCUT* iv*. 0 3 1 (CfcV^te, 0 2 9 IWf^fC 
FMin h l:FMout h i: Sr*B&T^«. 
[0 0 8 7] 

0 3 1 ©BiP#fblSit 5 0 0lC;J3V*Tfc, EI 2 9©HgHHfci£1l4 0 0(Dm&£m 
miZ±T<D^yy KtHCS b o xOTlTJS'J, S (13) 
<fce>lC-Ttl^, 0 2 9 tf>0f-5Ht=gfi4 0 0©^h|Bf#©ROM(D|{|^^nTlg^ 

«p-9flsSS*5 0 0©fff«J4, «P-9^I51K4 0 0©»-£,fc»J«8IS&#4>fc 

V^ £ W^ftjT? & »J , DP A^fm© & V^ 5 >f £ C ffll* £ & « . 

<BU H3 10iM8i5OOIi, 0 2 9tf)H£-5HbI£fi4 0 0<Z)i§-£J: U t>£/ 
7 h£J:0U 97. hn^A&&tf)ffc#it;t5<Z>T% 5 0 OCD^tfmSS- 

0Di2->f X#*£<&So Mtt^tt 5 0 0 lCte2o©3g#(#5 0 2 

5 0 4tf#4t6#, £:&0>flJSI#5 0 2gJ:tf5 0 4 © 3 l3-#£: ttT'fJ&X 
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[0 0 8 8] 
[0 0 8 9] 

box Z&mirZ>m2 9 3 1 0D^#ft:i§S4 0 0 £ XZf 5 0 0 ICO V^fe 

i»i *h ic £ ^'ffi # se m v& z> „ 

[0 0 9 0] 

t*^;^^rilWot^^5o #CfC/h£ V^ q = 2 (Dm&CO^'&Zmffi-t Z> , El 2 
9 &<fctf3 1 ©Bgp-^fbiSff 4 0033<ktF500 JC£^T, q = 2i:b, ^ (13 
) CffioT S u b b y t e C^^T 1 1 y h MSboxSMK 
o FM i n h £J:t>*FMo u t h &#Bf& L W&^tC ^3 c Q> 

j> c lf j , • • c q _ 2f j tHlbt*©a (14) £fc&5£ (15) 
(£>:&#£§S:^U d 0> d , j, • • d q _ 2> j {CMLT^(D^:( 

16) (Z)^;#lCig^-f £Z1 i^CioT, D P AKtt?Z>£±'\i%:'m8>Z>Z. LtfT* 

[0 0 9 1] 

q = 2, SboxCDizyh («^) ^©j^O, 1, • • 1 

5 {CoV\T 
m 1 4 ] 

c 0 j© (^=(10101010)2 (01010101) 2 

q^2, S b o xCD-fey £Ttf)j=0, 



(14) 

1 , • • • , 15 
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[«15J 

(Coj © C,j) V ( C,j0 C2j) V .... V (C q .2j0 Cq.ij) = (11111111) 2 (15) 

q^2, SboxR^l, £T<Dj=0, 1, • • 
[»16] ■ 

(doje d XJ ) v (d,je daj) v .... v (d q .„e d q .,j) = (11111111) 2 (16) 
[0 0 9 2] 

dp Ate, m9<DWfett&&Aizt3vzffife9j$yyi*ftt>n$>m&z.. m 
fettM&B&&z$cic&ttzffifeZ4 ^yyT*ftfrnzm&£tffoz> 0 m2 9fc 

£tf 3 1 ommtmn* 0 0& «fctf 5 O Otf^Tf&S^fcfcttlJI-r*. tf>y h 
(x, e) (ix©Ief©tf^hiWo 
[0 0 9 3] 

#S?#tt, «©8iJi(Z>fc#>lCJg*T0> (i) (i'i) (D^Mf^o. 

(i) dpa&Mvnt, («Tfg&§i) <Difc£PS£1-£ 0 

(ii) (i) ^K^SJifcafca^ailco^T, ^n-fey-!M^fflST?Mv>e,4xT 
V n 3 I©H £ K-T S ^ if e> £ x y * f -5 r h (C J: o ti & f S . 

[0 0 9 4] 

, htfxTfc£©S!J©#®lCJ:oT, -£<Z)^x y * $ tiS^cD^^ffiSrMVN 
[0 0 9 5] 
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d p A*fi^x*> 128^ bmKm?2>m&tem&znbti&fr^tc.M 

Git* 1 2 8 \£y hm<D±T<D-*!mtert*-y%?-*y 9 

^ffIitt2 128 ffit'$)S 0 DPAtCiotl 2 8tf»y h ||<7) 

iTfi^7 h (L SB) ««0T**Ii:^ofe»^tt, f©i©SU®12 
7±&fcTy h (MSBs) <Z)^T<3DnrfgJ&Ai?->?:^-xy tlli^VNOTN 

[0 0 9 6] 

S b o xO{l}*©D PAICffS^ttCo^t, @9«*fMA 
&C&tt3D P A£®2 9 £<fctK3 1 ©Hff#rt#SS4 0 0 «fe 5 0 0{C*fbTiI 
JBl/fc»-£{C^TSfcl8f5. ®2 9 £ J:tf3 1 0 &<D S ubbyteCfe 

v*r, -entries b o x©m^jffl^n- K£*i5#>f ^>^ic&v^dpa& 
aiffl-rsi:, HK i «2 8 (1 6-F) =2 1 2 8-8 F {citML&ftii£*-efl? 
ittsriiWoT^s. rrt% f= f 0 + f x + • • • + f x 5 -e&& 0 

f j li, ^©«ke>lc^a$tiS. j (j = 0, 1, • • •, 15) #S©Sb 

ox©ffiA7^^i&d 0) j, • • d q -i, j^ttilt 

117] 

WD,= (d 0 , ,ed 1( ,) V (d liJ ed 2 , ,)■ V • •• • V (d q _ 2 , ,0(3,.,, , 
) KOV>T, 

JWDj= (11111111) 2 &£fc£, f j = 0> 

f j =1, 

[0 0 9 7] 

ioT, j = 0, 1, • • •, 1 5©^TfCOV>T f j = 0©#^{c; Bf-5Hfc 
i^ttttD P AlC*f ltftt)^T*$>5„ ^(DfciMCte, £Ttf)j=0, 1, • • 
•,15 tC^V^T, WD j = (11111111) 2 T*&tt*U*&e>&V^ ZKZ) 
D P AS:fflV^Tlt?:#«>«(DJC<gMI*tM(CStt«^C© 2 1 2 8 h&S, 
[0 0 9 8] 

#UC iXORfflaiA (EI 9 CDWfettM&B) ife(iSboxA©AA (0 9 
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PA^, ^©^T^ (6) T^Stl^^tl*^ h • ^^©^©D P A£ 
[0 0 9 9] 

^iCfcttSD P A&, ^ (1 3) tC iot^^H h #L3l|-eM Vm=> S b o x 
<£>tfc£ lo ( 1 -fey h) L&I32 9 £<fctf 3 1 4 0 0 fcj:t>* 

5 0 0 izft LTMmist=.m&lZ-D^Tm>m'tZ>o ^OS® Subbyt e&JSSC 
fc^T, fft?ft©«XOR(Z)ffiiji^n - K3*lS*>f ^ >^tC;JSV\TDPA 
«K.«2 1 2 8 ~ (15/16) H {citML/feg+ ^. MT ,^ T , 

153 £##froTV^ 0 m% H = h Q +h 1 +- • -+h 15 T?&S 0 h 
j tt^C©J:-5tC3tiSlStl* 0 j (j =0, 1, 15) SiOSbox 

[«18] 

WC,= (c 0> ,©c ,) V (c !, ,0c 2 , j) V • • -V (c q _ 2> s @c q _! 
, ,) 

WC,= (wc 7 WC j, 6 wc Jf S WC J( 4 WC j, 3 WC j, 2 WC i W C j _ o 
) 2 {C33V>Tv 

hj= (e = 0, l, • • • , 7 KWUTwc j, e =oa*j££-r*eO<H#) 

[0 10 0] 

flPt>', j = 0, 1, • • • , 1 5lC0V^h j =0©i^DP AlZftLTm 

ti^tfes. -e^fe&fcte, £Ttf)j=0, 1, • • 1 5t;o^twc , 

%J 

= (11111111) 2 T*tetftH£tebft\<\ Z.(D£:g. DPAIri^til: 
[0101] 
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mz, V h * ^TJMDm&lZ^^T. q = 2 (13) JCfc»J-9-:f 

/WhMT'M^Sbox©t«yh (@80 UcRjg U ^ (6) vm 

^Ji^ittiSi^t'^S. 02 9£J:tf 3 l©Bf#^ff4 0 0£<j:tf 5 0 0 
lZjSVZ>mom.<DS ubbyt e #1 Ji tC £ T , S b o xCDA^ffitf 

Afcig/B-T^^C^oT, g|K £ £ 2 1 2 8 ~ (15/16) H iz ftfflx, f-ff 
nAT*MWiT*£Z> 0 ZLZ1T% H = h Q + x + • • - +h 15 h • it. 

tk<D&$lZfemznZo jSB0Sbox©Ai3?Xi'|^c O) j fej:rjtc 1 

119] 

WC j = c 0;J ©c 1J = (w Cj i7 wCj >8 * • *wc J 0 ) 2 lc43V*T» 
h,= (e=0, 1, .,7 tlilttwc Jp e = 0 e CQ§ilt&) + 

(e =0, l f ...,7£WLTwc Jf e =wc,, e+1 =l*i&teOfift) 

lit, w c • _ = 0 i'fctt 1 j liS b o x<D&m (##) Sr^i- 

J 9 " 

. e ttfcfy h&a 
[0 10 2] 

S b o x ©Ifctt 1 &#5£ (14) J^c 0) j XORc 1> j = (01 

0 10 10 1) 2 (10101010) 2 T? H«ft/M6 4 
fc&U, D P A&MV*T*l&#&S©fc&I?fctf3r*«:«:*T?& 2 6 8 "e&£ 0 

[0103] 

1 4) t&ltt (15) ^d 0) j , d lt • • • . d q _ 1 

> J 
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[0104] 



H^TX^ffijStdctS, S b ox£li^{iin-K^*f-r^>DPA^^ 1 2 8 



wD j =(d 0J ed 1J )v(d lJ ed 2J )v...v(d q . 2j ed q . 1J )(DM 




wd~(iiiiiiii) 2 (m^x^mm) 


2 128 




2 128-8F 

^ = 0 (if WD- (11111111)2) 
fj = 1 (otherwise) 



[0 10 5] 
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^2. mfeTTspmmz&Z, Subby t e\Z&tf%Sboxtfl-D<DM&* 
SboxAMn-Hlc^DPA^f, 1 2 8bV hW8S9t&#tbZ><D\z&& 



WCpCcojec^vCcu^^v... 




(q=2, Kttlf y h 


£T<D0sjsl5 CHIT 
(111111111) 2 


2 128 


2 23 




O 68 


O 68 


WCj = (WC^WC^WC^WC^WC^WCj^ 
wc j,i wc i.o)2 


2 128-(15/16)H 

H=h 0 +h 1 +...+ h, 6 
h j =(wc J e =0 CD$k) 
(e=0',l,..-,7) 


2 128-(15/16)H 

H=h 0 +h l +...+ h 15 
h=(wc je =0 
(wc je =wc j+le =l 
(e=0,l,...,7) 


^T(D0sjsl5 IzmLX 
(00000000) 2 


2 8 


2 8 



[0 10 6] 

1. 2JKJt©qfCoVNT, ISTX^ISlt SboxffiM©D-FtCft5 

DPAC^IT, S(16) ©*#«:»fci!:tf, m<DW.fe\ztm*.2 1 28 #& 

••£©tfj)* trace**. 

[0 10 7] 

2. 2&L£:<Z>q&CoVNT, ^ (13) ©*#S:»fe"t*-&, itvx^Mlt 
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S b o xAiJiD- RC*J"t£D P AtCMLT, BflgbTy h ■ ^^bTf&v^tt* 
[0 10 8] 

3. q = 2lCo^T, (13) ©^ff&ifet^ @5£v*?fliigte. Sb 
o xAAin- FlzM-fZDP AKMVX. BMfiify h^x;wco^T^F5$ ( 

14) Oc 0 . XORc 1( . = (01010101) 2 *fctt (10101 

oio) 2 «t©fi^tc?f#*2 6 8 ^ns^rawT?© 

[0 10 9] 

4. q^3lCOVNT, R OM§ittfit £ @jt * ffi&li, q = 
2 £RIC8?^#&#^T*£fcV>fc#>, ±5£©2(D»^ilH«JC^ (15) <D$k 

*2 1 2 8 #*&g&CDT% ££T?&S 0 
[0 110] 

5. ±j*0>3<Z>«-£lC;j3^T, (14) liSboxCty hCKSloi: 
K£LTV*S (q = 2fc©T?ffi:ftffi©»M:2fi) S b o x©t -y h©i[$:i 

[0 111] 

*mwiz.£zmfe*?x?mmt. ±i©7^>f-»j:^sPNi©i 

-JfJ^fC, DES0J:^j:7x^Xf;i/ (Feistel) §5[®Bf -5HC%jIMT£ S„ 
EI 3 2 (A) liilSCDDE S{Cj;SBir#ft;CD^S:^LTVNSo EI 3 2 (B) fcfc 
EI 3 2 (A) JCfe^*FBB»©J: »J#0J&«^S:^LTV^ o EI 3 2 (B) IC& 

[0 11 2] 

EI 3 3 (A) li, EI 2 1 ©Hi ®^>ry©BiP#^gl 0 0©— M&5tLTfc 
U, 0 2 9©ffiHHb£5*4 0 0fc»IKLfe^i»THfc^:**«Ss«:BI3 2®DE 
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siz£2>m^tizmmLfcm^itmm7 o o *mLT^2> 0 m3 3 cb) «b3 
3 (a) iztettzFmmv&vmmtemf&ZrthT^z. tu ®3 3 (a) tc 

&V^, 02 1 tCfet-tS^P-feytM 50, 1 6 0, 1 6 2feit>'l 64 

[0 113] 

W8I7 0 0I4, &»h<&3§£?-5SL«38£«7 0 1 *©SLRh«o 
T©5£v;*?iiFM i n h ©(f© lo?:liRbtMt5SM7 0 2 Kid 
¥XaaiKS*lfeIS7X^tFM i n h ^$:XORt5XOR7 1 2 A# 

gfc ($1*1*1 6®) ©FW«l«#tf;*fL3l«7 10~7 2 0 t, *©SL«hfleoT 
il?X?|FMo u t h ©tfi(Z> loS:lJiltMt-5l^7 0 4 FH 
i«#f^iI7 2 0®a}*i:l«$^@^^iFMo ut h ^XOR 
LTB|^^^t5XOR7 14i:, V*S. FW^if 7 1 

0~7 2 0ffl#^ii, Hfg©XORtf}AS:SWJSotBI3 3 (B) {Z^tltcF 

mmzmfth, ■z&fcjjt.ffimcDftjjzxoR (722-723) laotxo 

[0 1 14] 

m3 3 (b) (DFmmz, $mhiz$£^Tm%i2titc.mfe*?x9mFM it h 
ai*wnxoR7 6 2, *<Dmji<DmnMm&mEiz£-DTmm&mzn 

feA*Xi' i:!:XORtSXOR7 6 3 i:, ^©SLIfc h (C^o tf^/H 
iSubbyteS. h cp© lO&SjRbtXOR 7 6 3 CDffi*SMt5l 
^7 5 2fiit?7 5 6 i:, ^iff-^SboxS^ h {C^o X^-fJH 
hjMt§SubbyteS i( h fc, -ecOgL^ h (C^o Tit^A-f S x 

h cp©loS:IHbTffflffi*&Mt5M^7 5 4fe«}:af7 5 7ii, ^ 
*7 5 4 ^<fcUt7 5 7CDffi*S:i«ltffiijZ i' ^MtS^ttPi: 

[0 115] 

Bf 2 1 JCfcttSyn-fesr* 15011 ^=eu 1 6 OtCftijftStlTV^^'ny^ 



ffi!I#2 001-3108062 



#2001-178407 



Atc^oTEi3 3<Dm^itmmi o o^mmmmmi oi~76 z***mw-t& 

17 0 l~7 6 3fl:||J|bTt)j:^o 3<Z>^§£\ 0 3 3 li7 D -Hi: ITIS 

[0 116] 

Ef3 4 (A) l±, 02 4©^2©*>f :7©lfc-SHt3gS2 0 0 © — M&^LTfe 
»J, EI 3 1 (Z)Rf -*Ht=gg 5 0 0 lcM(Ufc^J&T*Hj£*7**til&$:gI3 20DE 
StC«fcSB8p-^f(;tCjgfflL/fcBiP#fl;$l«8 0 0 Sr'^UTV^S. ®3 4 (B) ttH3 
4 (A) tCfe^SFM^J: y#^H^#^&^LTV>S 0 <SU 134 (A) {C 
feVNT, H2 4 {Cfel-j-S^D-fe y-F2 5 0, ^^EU 2 6 0, 2 6 2£<J:tF264 

[0 117] 

03 4 (A) iCfc^T, WH^ftS* 8 0 0 tt, fttth 8 
0U, 3L«Mce£oT9J!M.&fT 3 0 2fc«fctf8 0 4 TO^8 0 

2fc<fct>*8 0 4 JCj:oTgLgS[htC^oT^^4xS^©Bt^MI5 8 2 0-8 
3 0t, &-£AvT?V^ 0 
[0 118] 

02 AKtettZzfUMvy-Z 5 0 14, ^ ^ U 2 6" 0 tC^jjftStlT V^S ^9 
AlC^oTBI3 4 CD.Hgp-i^fbSlflt 8 0 0 (DmttkMmM 8 01~8 6 2 #&«ffflf 5 • 
c MMhLT, ^"DiZyif 1 5 0&, fMIi8 0 1-8 6 2^lC*f0-T 

sttiiB&^siLfe^^y i6o ^(D^u^^^^mn-t^zmz^^rmmm^: 

18 0 1~8 6 2f5:^bT%j:^ o EI 3 4 l±7 U ~mt LTH,<5 

[0 119] 

m^mmms 2 0-8 3 0 S:f ttUlo T ffi A H«t 5tt85[g 

1 61) 0FilMffb©aS8 4 0-8 .5 0 &-£/uTV*S. FMMr 
-SHfc&SIS 8 4 0 — 8 5 0G>#*tt, BrfJgOX O R ffi# SrSWflHo T K i XOR 
FM i, h 1 ^ 0 "^ 34 (B) ^SftfeFSIR^fTU f0FilS[©^ 
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tmm<DHi^j^XOR (8 2 2-8 2 3) IZ J: o T X O R t T Sr^i" -So 
[0 12 0] 

BI3 4 (B) ©F58iSCli, IfoMfcK . tl^^fFM . ^ h 0XORfi: 

mm^Eiz^^xmm^m^nfcx^jxi' t^xoRt^xoRs 62t, 

ttM&T-'ffrS b o x S if h (CJ;^-9-^W bMMS ub'byteS^ h 
(i = l, 2, • • 8) VzfAJ h*MS if h (Dffi*?:»ibt 

[0121] 

EI3 3£J:t>*3 4&c£^T, ^-f ^-^©li^i: mmzAfi^x V FMi 
n 3 #\ ^-f >^-;i/&£|eI^&^£-eteFMo u t td:^l8& ~e ^ V > 

MORt^T'tej&^mT'V^Sn^T 1 -* (A) (B) £tfT*&< 

l?M<Dm (C) 

[0 12 2] 

^^>i*;t/£T*<D3£5&£jTcLTV\£ 1 , El 3 6 IC& V^> * S tlT 

■V>iz;i/ £1*03 6lC^3tlTVNS<t:e»JC4^±^ST*fey> 4 MM 

s p n mw&m b (c w * j: e> ic m&mm <z> m # v * ? tf&MmiR-zsm & s r 

[0 12 3] 

Zl©^^$:MV>tlliHt#MSS^©V^^ FMout ^HtC^So r<Z)# 
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^T* 3=- -V > "fe )\s~? 2> «fc O & 0j£ V X * £ M V^ T J: V*. 
[0124] 

zmisK-D^xmrnht-* l^u dp A^mt^^^x^r^^^iz. d 
p a w&jft't z> tz. tb \z » A#it#«*n? & -d j&mmtfz&m & mm ^im v & n n 
&&<d&v^ tot, m-%4mm<DM®<D®i ; 5yy ^KM^xm^m^^^m^ 

[0125] 

, Rli*fm^b(Z)^(Z)^^RAM*$:^L, Ml±*fm& L©#llr<Z)iftM& R 

^ i y ? ? * % *sm tem&mxm £ ti & „ 

[^3] 



& «£ zmgfc^* ^ iiSfejgffl <Ditm m UR«M) 











q*2 


q=2 


mmmm 


S 


-S 


-s 


»S (3S-5S) 


RAM* 


R 


hR 


bR 


aR+M 


ROM* 


M 


qM 


2M 


B M 




1 


*2 128 


2 72 


»2 128 
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[0 12 6] 

^4(i, de s<Dmmicistt2>wfe'?xt7umzm^fcm^k<Dffimz.. dp 

[*4] 



£4. DESI:*lt5, HjrTX^ftfcjiffl, DPA*ff&L0i^ *5«fctf& 











q=2 




s 


«s 


»S (3S-5S) 


RAMI 


R 


bR 


feR+M 


ROM! 


8M 


16M 


«8M 




1 


»2 56 


>>2 M 



[ 0 1. 2 7 ] 

^: S v > r a Mflg« & /g^l i: * 1* *f « * U © i: « l^f u © ffiS ^ la *e 

[0 12 8] 

o 

[0129] 
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[0 13 0] 

mmim^vi^xmimcimcom^-^)i<D^(D lffl&MtsiMh, 



4 3 
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r©*»©«p^b«©#^tt, f©a®, t&fBSMi&tt»3ifn#«£, tutsan 

(#136) vx^$n^B«<Z)@^^-^>5: S [x] fcU 
Bfflf-^5:S f [xXORc . ,] XORd. , (j=0, 1, ••• 

J 1 , J 1 f J 
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